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Frequently Asked Questions (FAQs) about 
K-12 Behavioral Threat Assessment and Management 


Since 2013, when the Virginia General Assembly enacted legislation requiring threat assessment teams in public 
schools, the Virginia Department of Criminal Justice Services (DCJS) — Virginia Center for School and Campus 
Safety (VCSCS) has provided training, resources, guidance, and technical assistance to school and law 
enforcement personnel across Virginia. Throughout these efforts, participants often raise questions to enhance 
their understanding and application of laws, model policies and procedures, and practice guidelines. These 
“Frequently Asked Questions” provide answers concerning behavioral threat assessment and management 
processes. 


Establishing and Operating a Threat Assessment and Management Process 


Are all schools required to have Threat Assessment Teams? 


All Virginia public schools are required to have policies for the establishment of threat assessment teams. 
Superintendents must establish a threat assessment team for each school in the division. Those teams may 
serve one or more schools in the division. 


There is no statutory requirement for private schools in Virginia to have threat assessment teams. However, 
private school administrators should consult with their attorneys and boards for guidance on this issue, as threat 
assessment and management processes are recommended practices for educational institutions. The Virginia 
Association of Independent Schools has criteria for accreditation that reference threat assessment processes. 
The Virginia Council for Private Education also provides guidance regarding school safety and other relevant 
issues. The Virginia Center for School and Campus Safety recommends that public schools establish a 
memorandum of understanding (MOU) with private schools or private day placement schools (where they have 
students placed) regarding threat assessment and management processes, including suicide prevention and 
intervention. 


Do school Threat Assessment Teams have to follow certain guidelines? 


Yes. Virginia public schools must enact threat assessment and management policies that are consistent with the 
Threat Assessment and Management in Virginia Public Schools: Model Policies, Procedures, and Guidelines 
published by the DCJS Virginia Center for School and Campus Safety, per § 9.1-184, the authorizing statute for 
VCSCS. The school threat assessment statute also requires schools to develop policies that include procedures 
for referrals to relevant community resources. These may include community service boards or health care 
providers in circumstances where those resources are appropriate to provide further evaluation or treatment of 
persons who are involved in threat assessment and threat management cases. Schools should establish 
memoranda of understanding regarding such referral relationships and review them annually to ensure that 
they are up to date. 


The DCJS Virginia Center for School and Campus Safety and the Virginia Department of Education have 
developed several resources to support schools in their compliance with state law and model policies and 
procedures. School threat assessment team members should be familiar with: 


e Threat Assessment and Management in Virginia Public Schools: Model Policies, Procedures and 
Guidelines, 3rd Edition (Virginia DCJS, 2020) 


e Information Sharing Guide for K-12 Public Schools (VA DCJS, 2020) 
e Suicide Prevention Guidelines for Virginia Public Schools (VA DOE, 2020) 
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Do threat assessment teams only address threats of mass violence? 


No. The teams are established for early identification, assessment, and management for a broad range of violent 
behaviors including individual violence to others or self, bullying, dating/domestic violence, stalking, predatory 
sexual misconduct, human trafficking, violent extremism, etc. The teams also work to recognize and intervene 
with persons whose behavior is causing concern to others or indicates a need for assistance. Most cases 
addressed by Virginia school threat assessment teams have involved concerns of suicide or self-harm. Only a 
small number of cases are classified as high or imminent levels of concern and most of those also involve 
concerns of suicide and self-harm. 


Are school threat assessment teams required to address threats by non-students? 


Yes. Virginia public schools are required to adopt policies that establish threat assessment teams whose 
functions include the assessment of and intervention with individuals whose behavior may pose a threat to the 
safety of the school, staff, or students. This reflects the understanding that it is not only students who may pose 
a threat of violence or harm to the school community, but a range of others including (but not limited to): 


e Students: current and former (and potentially prospective) 

e Employees: current and former (and potentially prospective) 

e Parents, guardians, or other family members of students 

e Persons who are (or have been) in relationships with staff or students 
e Contractors, vendors, or other visitors 


e Persons unaffiliated with the school 


While students will likely represent the largest number of potential subjects of concern, schools must implement 
a process for identifying, assessing, and managing all threats that may reasonably be posed to the school 
community. 


Does a school division have to establish a committee for oversight of threat assessment teams? 


No. The Superintendent may choose to do so at their discretion and, if so, they can either establish a committee 
for such oversight purposes, or they can task an existing committee with those duties. However, if sucha 
committee is created, then it must include individuals with expertise in human resources, education, school 
administration, mental health, and law enforcement. 


Where such division-wide committees are established they may be tasked to provide oversight to school-level 
threat assessment teams; ensure that procedures are maintained for effective information sharing and 
collaboration between the school division and community mental health and law enforcement agencies; assess 
the effectiveness of the threat assessment process throughout the school division; and recommend changes to 
policies and procedures, as needed, to ensure an effective threat assessment process reflecting known best 
practices. The Committee may also serve as a division level threat assessment team for those cases that impact 
across the school division or where cases surpass the resources or abilities of school threat assessment teams. 
Committee members should be adequately trained regarding laws, policies, procedures, and guidelines relevant 
to threat assessment and management. 


How confidential is the threat assessment and management process? 


The threat assessment team operates in a highly confidential manner. The Code of Virginia § 22.1-79.4(F), states 
that, “No member of a threat assessment team shall redisclose any criminal history record information or health 
information obtained pursuant to this section or otherwise use any record of an individual beyond the purpose 
for which such disclosure was made to the threat assessment team.” The team’s records are also generally 
exempt from disclosure under the Freedom of Information Act, except under certain circumstances. Of course, 


Frequently Asked Questions (FAQs) About K-12 Behavioral Threat Assessment and Management 


DCJS Virginia Center for School and Campus Safety 2 


where there is information from a student’s educational record, all the protections under the Family Educational 
Rights and Privacy Act (FERPA) also apply to members of the threat assessment team. 


Are there protections for school staff who report concerns to the threat assessment team? 


Yes. First, school staff are fulfilling policy obligations when making good faith reports. The model policy states 
that “All school division employees, volunteers, and contractors are required to report any expressed threat(s) 
or behavior(s) that may represent a threat to the community, school, or self.” Further, the model procedures 
states “All school division employees, volunteers, and contractors are required to report immediately to the 
designated school administrator any expression of intent to harm another person, concerning communications, 
or concerning behaviors that suggest an individual may intend to commit an act of violence, or otherwise need 
intervention or assistance.” Therefore, failure to report such a concern would mean that the staff member is 
acting against policy. 


Moreover, the Code of Virginia provides protections for school staff (or any other persons) who report or 
investigate certain incidents at school: 


e The Code of Virginia § 8.01-47, grants immunity from all civil liability to any person who, in good faith 
(with reasonable cause and without malice) reports, investigates, or causes an investigation to be made 
into information that any person poses a credible danger of serious bodily injury or death to any other 
person on school property. 

e The Code of Virginia § 8.01-220.1:2, grants immunity from all civil liability for any teacher regarding acts 
or omissions resulting from the supervision, care or discipline of students, or reporting of alleged 
bullying or crimes against others, when such acts were within the teacher’s scope of employment and 
done in good faith. 

e The Code of Virginia § 40.1-51.4:5 provides immunity from all civil liability for any employee who, in 
good faith reports threatening conduct by a person employed at the same workplace. 


Virginia law also has provisions protecting employees from discrimination or retaliation for reporting safety 
concerns or violations of state or federal law, or for participating in an investigation or inquiry. 


Can a subject of a threat assessment appeal the assessment? 


First, what is being appealed needs to be clarified. Is it the assessment itself or is it any sanctions that may result 
from the subject’s behavior that was part of the threat assessment? The threat assessment and management 
process is not the same as, and should not replace, any relevant disciplinary or criminal justice processes. Those 
are subject to appeal to provide reasonable due process. 


Threat assessment teams are statutorily invested with the responsibility and authority to identify, assess, and 
manage potential threats, not just to assess the threats. Some case management interventions may impact 
aspects of a student or employee’s school/work experience and the subject (or parents/guardians of student 
subjects) may take exception to or not understand the basis for the interventions. 


Further, parents of minor children, or the student themselves if 18+, have a right to inspect the student’s 
educational record and to correct errors in the record, per FERPA. If the parents think there was an error in the 
threat assessment or case management recommendations, then they should be encouraged to provide 
information or evidence for the threat assessment team to consider for on-going assessment; the team should 
welcome and consider a parent’s input. That does NOT mean the team needs to accept that input as the only 
perspective, but their practice should reflect the input was considered in deliberations regarding actions taken, 
and that that there was interactive dialogue about existing or potential accommodations intended to mitigate 
the reasonably perceived threat. Ultimately, the goal is to engage with parents and students where possible and 
not leave them shut out of the process. 
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A parent not agreeing with the threat assessment—done based on the totality of information lawfully and 
ethically available—may indicate that the student isn’t being forthcoming with them about the nature of the 
issues and concerns. If so, all the more reason to hear what parents have to say to build their involvement and 
engagement in the process when possible. 


Also, if a threat case involved issues related to a disability known to the school, then the school must consider 
medical advice or the best information available to ensure they are compliant with disability laws. 


Are there resources available if threat assessment teams need guidance or assistance? 


Yes. The VCSCS has retained an experienced Threat Management Consultant, as an independent contractor 
available to school threat assessment teams when consultation or training is needed regarding development of 
threat assessment processes, or for issues related to management of cases. To request such technical 
assistance, please contact: 


Brad Stang, Threat Assessment Program Coordinator 


brad.stang@dcjs.virginia.gov (804) 997-1278 


Threat Assessment Team Membership 


Who are required members of the threat assessment team? 


Per the Code of Virginia § 22.1-79.4(C), threat assessment teams “shall include persons with expertise in 
counseling, instruction, school administration, and law enforcement.” The Code states that persons must have 
expertise in those areas, but it does not necessarily require them to be currently serving in those roles. The 
intent is to support a multi-disciplinary approach to maximize the effectiveness of threat assessment and 
management processes. Persons with an expertise in counseling may include school psychologists, counselors, 
or social workers. Persons with expertise in instruction may be teachers, administrators with teaching 
experience, or special education staff. Those with expertise in school administration are typically principals or 
assistant principals. Those with expertise in law enforcement may be school resource officers or local or state 
law enforcement officers. 


Schools should also (as resources allow) identify back-up/secondary team members to fulfill responsibilities if 
the core team member is not available. Ideally, each core member would have at least one back-up, typically 
from the same area of expertise. 


Team members should be selected to fulfill the obligations of the Code, and to help the team maximize its 
capabilities for early identification with developing concerns, comprehensive assessment of situations, and 
effective management and monitoring to resolve the concerns to the degree possible. 


Each team should have a designated leader to facilitate the team process and ensure compliance with legal 
requirements and standards of practice. This is typically a school administrator with oversight of the threat 
assessment team process for the school(s) covered by the team but may be any staff member appointed by 
school administration. 


Can other persons also serve on the Threat Assessment Team ona regular or ad hoc basis? 


Yes. Virginia Code specifies the minimum expertise required but does not limit schools from including persons 
with other areas of expertise (e.g., human resources, special education, disability services, nursing, security, etc.) 
as core members of the team. 


The team may involve other staff members (or community resources) on an ad hoc basis to assist with a 
particular case or issues specific to certain cases, even when that staff member is not named as a core member 
of the team. 
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Is law enforcement a required member of the threat assessment team? 


Yes, as referenced above, law enforcement is a required member of the team. For schools that have School 
Resource Officers (SROs), the VCSCS recommends they utilize their SRO as the member of the team, as the SRO 
has training specific to operating in schools and should be knowledgeable of students, staff, and the school 
community. 


What if our school or school division does not have SROs? 


Schools that do not have assigned SROs should first attempt to utilize SROs from other schools within the 
division. SROs receive training specific to their roles within schools and at least foundational training in threat 
assessment. 


If SROs from other schools within the division are not available, or if school divisions do not have SROs as part of 
their school program, then schools would need to coordinate with their local law enforcement agency to have 
an officer available when there is a need for the school to perform a behavioral threat assessment. As threat 
assessment teams operate best with consistent team members, recommended practice would be to work with 
local law enforcement to have a consistent officer(s) assigned to serve the school’s threat assessment team, and 
to collaborate with the law enforcement agency to ensure that such officers are trained in threat assessment 
and management practices, and are aware of relevant state and federal laws as well as the Model Policies 
Procedures and Guidelines promulgated by the Virginia Center for School and Campus Safety. This is best 
accomplished through the school and local law enforcement agency’s memorandum of understanding (MOU). 


Are threat assessment team members required to have training? 


Staff should always be adequately trained to perform the essential duties of their role and position. Virginia 
Code requires school threat assessment teams to operate processes that are consistent with the DCJS Virginia 
Center for School and Campus Safety publication, Threat Assessment and Management in Virginia Public 
Schools: Model Policies, Procedures, and Guidelines. The Model Procedures section states that all members of 
the threat assessment team (core and backup members) will complete basic School Threat Assessment Training 
through DCJS or the equivalent. Team members should complete refresher training at least every three years. 
They should also participate in continuing education in threat assessment related topics through DCJS or their 
professional disciplines as resources allow. 


Primary Functions and Responsibilities of Threat Assessment Teams 


What are the primary functions and responsibilities of the threat assessment team? 


As outlined in Code of Virginia § 22.1-79.4(C), “Each team shall (i) provide guidance to students, faculty, and staff 
regarding recognition of threatening or aberrant behavior that may represent a threat to the community, 

school, or self; (ii) identify members of the school community to whom threatening behavior should be 

reported; and (iii) implement policies adopted by the local school board pursuant to subsection A.” Those 
policies refer to the establishment of threat assessment teams, including the assessment of and intervention 
with individuals whose behavior may pose a threat to the safety of school staff or students. Threat assessment 
team members also have a duty to notify the superintendent (or designee) upon a preliminary determination 
that a student poses a threat of violence or physical harm to self or others. While Virginia law only requires this 
notification when it involves students, schools should also have specific guidelines for such notification when 
cases involve non-students. 


What is threatening/aberrant behavior? 


A threat is a concerning communication or behavior that indicates that an individual may pose a danger to the 
safety of school staff or students through acts of violence or other behavior that would cause harm to self or 
others. The threat may be expressed or communicated behaviorally, orally, visually, in writing, electronically, or 
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through any other means; and is considered a threat regardless of whether it is observed by or communicated 
directly to the target of the threat or observed by or communicated to a third party; and regardless of whether 
the target of the threat is aware of the threat. 


Aberrant behavior is behavior that is atypical for the person or situation and causes concern for the safety and 
well-being of those involved. Aberrant behavior for an individual involves actions, statements, communications 
or responses that are unusual for the person or situation; or actions which could lead to violence toward self or 
others; or are reasonably perceived as threatening or causing concern for the well-being of the person. 


How should threatening, aberrant or concerning communications or behaviors be reported? 


Threat assessment teams are to identify members of the school community to whom threatening/aberrant 
behavior should be reported to (see Code of Virginia § 22.1-79.4(C)). The team should ensure that any reporting 
mechanisms used by the school (e.g., hotlines, tip lines, website, social media/mobile apps, etc.) are kept up to 
date, work consistently, and are checked on regular and timely basis. 


Be sure to provide access to mechanisms that allow for anonymous reporting. Anonymous reports can involve 
some challenges, as they may not include enough information to understand the problem or how to intervene. 
As they are anonymous, there may not be a way to follow-up for more information or to consider the credibility 
of the report. However, some community members will only come forward through an anonymous report and it 
is likely better to have an anonymous report of a legitimate concern than to have no report. 


Be sure that staff understand that that Virginia law provides immunity from civil liability for good faith reports of 
concerns. 


Behavioral Threat Assessment Teams and Handling Threats of Harm to Self 


Can threats of harm to self/suicide be reported to threat assessment teams? 


Yes, threats of harm to self and suicidality can be reported to the threat assessment team. Virginia law (e.g., 

§ 22.1-79.4) imposes certain duties on school threat assessment teams related to individuals who may pose a 
threat to the community, school, or self. These duties include providing guidance to students, faculty, and staff 
regarding recognition of aberrant or threatening behavior that may represent a threat to the community, 
school, or self. Further, upon a threat assessment team making a preliminary determination that a student 
poses a threat to self or others, the threat assessment team has a statutory responsibility to notify senior school 
administration. Virginia law emphasizes the role of threat assessment teams in suicide prevention and 
intervention. 


Furthermore, the Virginia Department of Education (VDOE) provides guidance in the updated Suicide Prevention 
Guidelines for Virginia Public Schools (see page 20): “Many guidelines for school-based programs (e.g., SAMHSA, 
NASP) advocate for a multi-disciplinary approach to the suicide prevention and intervention process.” A threat 
assessment team is a multi-disciplinary team that is mandated by state code. VDOE guidance further states, 
“Localities may choose to create division wide or school-based suicide risk-assessment teams or assign those 
duties to existing team(s). As all public schools in Virginia are mandated to have threat assessment teams, which 
already have some duties related to self-harm and include similar school personnel; schools may use their threat 
assessment teams in this capacity.” 
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When should concerns of self-harm come to the threat assessment team? 


Where the subject of concern is a student, and any of the following concerns are also present, then the case 
should be referred to the threat assessment team: 


e The student also has ideation or intent to harm others. 


e The student’s acts of harm to self would pose a threat of harm to others, whether intended or not, e.g., 
a student intending to harm only themselves by shooting themselves in front of an occupied classroom. 
Even where the student had no intent to cause harm to others, the risk to others would be significant. 


e The student has engaged in behaviors (e.g., planning or preparation) that would place others at risk of 
harm, whether intended or not. 


e The student’s suicidal or self-harm behaviors are related to experiences of victimization, bias, bullying, 
harassment, or to other environmental/climate issues within the school. 


e Others (e.g., students, staff, parents/guardians, community, etc.) are, or may reasonably be, significantly 
impacted by the threat of harm to self. 


When schools have suicide crisis response processes, they are almost exclusively focused on serving students, so 
any case involving concerns of self-harm by a non-student that impacts upon the safety of students, staff, or the 
school community, should be directed to the threat assessment team. 


Which member(s) of the threat assessment team would conduct the suicide risk assessment? 


While initial reports of a potential threat of harm to self can be “triaged” by any two members of the threat 
assessment team, once it is determined the individual poses a risk of harm to self, then school or community 
mental health professionals should retain the primary responsibility for the direct assessment of and mental 
health interventions with the subject exhibiting risk for self-harm or suicide, per school guidelines. Other team 
members assist by supporting those assessment and intervention actions and taking responsibility for 
addressing other concerns impacting upon the case, such as those noted above. 


What are the benefits of using a multi-disciplinary threat assessment team for a threat of harm to self, or 
others, or both? 


There are several benefits of utilizing the threat assessment team in the suicide risk assessment process as it can 
provide additional options and resources if needed and deemed appropriate. The threat assessment team is 
established and practiced in working collaboratively to address concerns related to the health, safety, and 
well-being of the school. Utilizing the threat assessment team for all cases that pose a threat of violence or harm 
to self or others enhances consistency of application of policies, procedures, and practices across cases. Even 
where schools have a separate student suicide crisis response process, they still have a responsibility to address 
threats posed by non-students, including those that pose a threat of harm to self (e.g., school staff). Under 
Virginia law, members of the threat assessment team may have authorized access to otherwise protected 
records that other school staff do not have lawful access to without a release (e.g., criminal history information 
of adults and juveniles, and health records of any individual who may pose a threat to others or self within the 
school). Such records could provide more insight regarding the student’s risk and needs, and help the student 
access the appropriate services. 
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Addressing Threatening/Aberrant Behavior in the Virtual School Setting 


The following section is provided to help threat assessment teams continue to be in compliance 
with the Code of Virginia § 22.1-79.4 during this unprecedented time of virtual, hybrid, and 
in-person learning. 


Are school threat assessment teams responsible for addressing threats or concerning behaviors that occur in 
the virtual school setting, even if the subject of concern is in their home or another setting other than the 
school building? 


Yes, the virtual school setting is still part of the school and threat assessment teams are responsible for 
addressing threatening, aberrant or concerning behavior that occurs within, or impacts upon students, staff, and 
the school community. Note that this includes threats of harm to self. 


Do threat assessment team structure and responsibilities change in the virtual school setting? 


No. The threat assessment team membership, structure and responsibilities remains the same under the law. 
However, schools should consider how the transition to a virtual school environment may impact upon the 
presence or availability of SROs or other law enforcement. Also, when there are periods of civil unrest (that 
co-occur with a virtual school environment), schools must consider how such unrest impacts upon law 
enforcement’s availability and engagement as well as community concerns about law enforcement presence or 
roles in schools. 


All the other statutory responsibilities remain the same in the virtual school setting. There may be a greater 
need for communication collaboration to facilitate threat assessment and management cases when students 
and/or staff are not present within the school building but still involved with school activities. 


Is there additional training regarding issues related to conducting threat assessments when operating ina 
virtual setting? 


Yes. DCJS provides a training module entitled, Threat Assessment and Management in the Virtual School Setting: 


Considerations for Practice. Monitor the DCJS website for the training schedule, or subscribe to DC/S Updates to 
be notified when new training and resources are announced. You can also contact DCJS staff to schedule a 


session for your school. 


Records of Threat Assessment Teams 


Are the records of a Threat Assessment Team considered to be educational records covered by FERPA? 


The documentation of a threat assessment case involving a current student is almost certainly an educational 
record covered by FERPA, except for narrow exemptions. As referenced in the VCSCS Information Sharing Guide 
for K-12 Public Schools, “FERPA defines Education Records as: records that are (1) directly related to the student 
and (2) maintained by an educational agency or institution or by a party acting for the agency or institution.” 
This would cover the overall threat assessment and management record even if specific records considered in 
the behavioral threat assessment management case were not, themselves, educational records. The overall 
record of team assessment, intervention, referrals, follow-up, and case resolution regarding an identified or 
reasonably identifiable student would be a FERPA-protected record. 


The documentation of a threat assessment case involving former students (created after they no longer attend 
the school) are NOT educational records. 


The documentation of a threat assessment case involving persons other than students are NOT educational 
records, except to the extent they may directly relate to a student and are maintained by an educational agency. 
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If an SRO keeps threat assessment records, are those records exempt from FERPA? 


Records of a school law enforcement unit are exempt from FERPA if specific criteria are met. As noted in the 


VCSCS Information Sharing Guide for K-12 Public Schools, a law enforcement unit record is a record that is: 


e Created by a law enforcement unit 
e Created at least in part for a law enforcement purpose (such as the prevention of violence), and 


e Maintained by the law enforcement unit 


Therefore, school records about a student (involved in a threat assessment case) provided to an SRO do not 
become exempt from FERPA as they were not created by the SRO/school law enforcement unit. Similarly, school 
law enforcement unit records (about a student) provided to other school administrators or staff may become 
part of the student’s educational record if they are maintained by the school, outside of the law enforcement 
unit. 


Do students (or their parents or guardians) have a right to access school threat assessment records pertaining 
to them? 


The records of a threat case that are directly related to a current student and are maintained by the school are 
likely to be an educational record, to which the student (or parent/guardian) have an affirmative right to inspect 
and review under FERPA. Schools must comply with requests for review within 45 days of receiving the request 
and must respond to reasonable requests for explanations and interpretations of educational records. Note that 
personally identifying information (PII) regarding other students must be redacted; there is no provision for 
redacting PII of non-students (e.g., redacting a teacher's name before allowing review of the threat assessment 
team record regarding a student). 


Where should threat assessment records be stored? 


It is most useful to have one centralized database/record system for all threat assessment cases. In other words, 
it is NOT recommended to have student threat assessment cases stored in one place, staff in another, and 
unaffiliated persons stored in another as that would create more silos of information. 


Schools are advised NOT to store the full threat assessment as part of a student’s central record, but to have a 
notation in that record that a threat assessment case occurred involving that student and the dates of the case. 
There are several reasons for this including the desire to limit unnecessary access to sensitive threat assessment 
and threat management case information by those that may be accessing/using the central record for some 
other legitimate purpose, but who do NOT have the need to access the threat assessment information. 
However, it is important to preserve the ability to reference the threat assessment case, should there be a need 
to do so (e.g., transfer between schools) and having the notation helps facilitate that exchange. 


Specifically, the following practices are recommended in VCSCS trainings and technical assistance: 


e Threat assessment records should not be stored in the student’s cumulative file; however, schools 
should consider a notation in the cumulative file and/or electronic records system that a threat 
assessment was conducted and the dates on which it was initiated and closed. 


e Threat assessment records should not be stored in school counseling or school psychologist files or 
offices. 


e Threat assessment records should not be stored in the SRO’s office. 


e Threat assessment records should be stored under the control of the threat assessment team 
chair/leader, usually an administrator; and all team members (and no one else) should have access 
whether the record is hard copy or electronic. 
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Note that these guidelines refer to the official full record of the threat assessment team, and that specific offices 
or personnel may also have documentation regarding their services or support, in addition to what is in the main 
threat assessment file. 


Are threat assessment records subject to FOIA requests? 

For the most part, no. Virginia Code § 2.2-3705.4 excludes records of a school threat assessment team from 
Freedom of Information Act requests where the records relate to the assessment or intervention with a specific 
individual. 


However, in the event an individual (who has been under assessment) commits an act or is prosecuted for the 
commission of an act that has caused the death of or caused serious bodily injury (including any felony sexual 
assault) to another person, the records of a threat assessment team concerning the individual shall be made 
available. The statute prohibits the school from disclosing any criminal history records obtained pursuant to 

§ 19.2-389 or § 19.2-389.1, health records obtained pursuant to § 32.1-127.1:03, or scholastic records as defined 
in § 22.1-289. The school shall remove information identifying any person who provided information to the 
threat assessment team under a promise of confidentiality. 


Are schools required to use the threat assessment forms in the Model Policies, Procedures and Guidelines? 

No. The forms provided in the Model Policies, Procedures and Guidelines (and available on the DCJS website) are 
sample forms that schools MAY use to document their threat assessment and management efforts. Schools may 
use the forms as they are, modify the forms to reflect the school’s processes, or use their own forms for 
documentation. 


How long should threat assessment team records be retained? 

Under the Code of Virginia § 42.1-82, the Library of Virginia has the authority to issue regulations governing the 
retention and disposition of state and local public records. School threat assessment teams should retain and 
dispose of records in a manner consistent with the relevant Library of Virginia schedule cited below. 


Student threat assessment records 
Retain for five (5) years after student graduates, completes a Board of Education program, transfers, or 
withdraws. 

Source: Schedule GS-21 (Threat Assessments; page 20) 


Available at: www.lva.virginia.gov/agencies/records/sched_local/GS-21.pdf 


Non-student threat assessment records 
Retain for five (5) years after the event or incident documented. 
Source: Schedule GS-03 (Incident Reports; page 6) 


Available at: www.lva.virginia.gov/agencies/records/sched_local/GS-03.pdf 


Employee health records, as part of threat assessment record 
Retain for thirty (30) years after separation from employment. 
Source: Schedule GS-03 (Employee Health Records; page 4) 


Available at: www.lva.virginia.gov/agencies/records/sched_local/GS-03.pdf 


How should threat assessment team records be destroyed? 

Destruction of confidential or privacy-protected paper records must be done by shredding, pulping, or 
incineration. Electronic records must be overwritten with meaningless data or the storage media must be 
physically destroyed. Commercial software applications are available that electronically shred records from 
media. Deletion of confidential or privacy-protected information in electronic storage media is not acceptable. 
Note that destruction of confidential records also requires documentation of the destruction per Library of 
Virginia guidelines, as authorized under state statute. Schools are encouraged to consult the Library of Virginia 
guidelines and their legal counsel for guidance. 


Frequently Asked Questions (FAQs) About K-12 Behavioral Threat Assessment and Management 


DCJS Virginia Center for School and Campus Safety 10 


